Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The issue was addressed with improved input validation.Check if you run itEPSS 0.38%May 11, 2026
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.14%May 11, 2026
- Low2.0A security vulnerability has been detected in jishenghua jshERP up to 3.6.Check if you run itEPSS 0.22%May 11, 2026
- Medium5.5A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59.Check if you run itEPSS 0.38%May 11, 2026
- Medium4.9Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.26%May 11, 2026
- Medium4.3Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.24%May 11, 2026
- Medium6.5Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.21%May 11, 2026
- Critical9.4oxyno-zeta/s3-proxy is an aws s3 proxy written in go.Check if you run itEPSS 0.55%May 11, 2026
- Critical10.0SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.Check if you run itEPSS 0.44%May 11, 2026
- High7.3Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries.Check if you run itEPSS 0.29%May 11, 2026
- Medium5.5A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929decba.Check if you run itEPSS 0.37%May 11, 2026
- High8.7Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation.Check if you run itEPSS 0.43%May 11, 2026
- Medium6.8Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative path…Check if you run itEPSS 0.14%May 11, 2026
- High7.7Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path where the verifyUserToken() function fails to reje…Check if you run itEPSS 0.38%May 11, 2026
- Medium6.3Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values.Check if you run itEPSS 0.27%May 11, 2026
- Medium6.9WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.25%May 11, 2026
- Medium6.7Tookie is a advanced OSINT information gathering tool.Check if you run itEPSS 0.14%May 11, 2026
- Critical9.9FireFighter is an incident management application.Check if you run itEPSS 0.27%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 3.28%May 11, 2026
- High7.7OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised mode…Check if you run itEPSS 0.49%May 11, 2026
- Medium5.9OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload.Check if you run itEPSS 0.29%May 11, 2026
- High8.4OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during pro…Check if you run itEPSS 0.14%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.Check if you run itEPSS 0.28%May 11, 2026
- Medium6.0OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trus…Check if you run itEPSS 0.22%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.Check if you run itEPSS 0.25%May 11, 2026
Sort